Privacy Notice (PDPA 2010)

Version 2027-1 · Persatuan Lawn Bowl Malaysia (PLBM) · Bahasa Melayu

The Malaysian Lawn Bowls Association (PLBM) runs the Passport ORKID school programme. This notice explains what personal data we collect about participating students (many of them under 18), why, and your rights under the Personal Data Protection Act 2010 (as amended).

What we collect

Student: name, date of birth, gender, school and class, attendance, skill test results, points, badges and competition results; optional special-needs/para class information (sensitive, collected only with explicit consent). Guardians: name, relationship, phone and email. Users: name, email, phone, sign-in history.

Why we use it

To run the programme, track progress and continuity, award recognition, report aggregate results to the funder (ORKID) without identifying students, and keep the system secure. Optional uses need separate consent: photos/media, AI-assisted progress reports (de-identified data only), medical and travel information.

Children and consent

For students under 18, a parent or guardian gives and may withdraw consent at any time through the school or PLBM. Withdrawing AI-report or photo/media consent takes effect immediately.

Who sees it

Access is limited by role and scope (school, state, national). The funder sees aggregated figures only; small groups are hidden. Service providers that process data for us (hosting, optional AI) are listed in our processor register, including any processing outside Malaysia.

Retention and security

Records of students who leave are anonymised after the retention period (default 5 years) unless a legal hold applies; aggregate statistics are kept. Data is protected by access control, encryption of secrets, audit logging and backups.

Your rights

You may ask to access, correct, or request erasure of your child's data, or withdraw consent. We respond within 21 days. Contact your school administrator or the PLBM Data Protection contact (to be confirmed by PLBM). Complaints may be made to the Personal Data Protection Commissioner.

Draft for legal review before launch.

Back